Week 49 - VMware Digital Workspace Update

Weekly highlight: 

 

Announcing SaaS availability of VMware Workspace ONE UEM Console 2111

• VMware Workspace ONE UEM Console 2111 is available to Shared SaaS customers as of December 7, 2021! Rollouts to Shared SaaS environments will begin next week. 

• What's New?

• Stay informed with our brand new console banner notifications.
  With the new console banner notifications that appear across the top of the UEM console, you can stay updated on maintenance issues, upgrades, outages, and product announcements.

• We've made a few enhancements to the Freestyle Orchestrator.

• Freestyle has been promoted from technical preview to limited availability for SaaS customers. The following improvements to Freestyle Orchestrator have been made in this release.
  We have added a fast lane delivery of workflows to small device fleets. That is, workflows being deployed to <2000 devices, the devices will be notified immediately upon publishing.
  Workflows in Windows can be retrieved by devices during device check-in even when no user is logged in. This behavior requires Windows Hub 21.11.
  Workflow statuses will now be reported more frequently by devices to increase visibility to administrators, and this requires Windows Hub 21.11.
  We have made changes to the Hub catalog and assignment statuses behavior when an app is assigned both from workflows and directly.
  Additionally, admins can now add a change log to workflows and force them to execute.

• We’ve made check-in check-out more flexible by introducing guest sessions for Launcher
  You can now designate a second Launcher profile as a Guest Session profile and enable users to skip directory authentication and quickly access installed applications.

• Silently install your required App Store apps
  With iOS 15.1, you can set any single App Store app as a required app during enrollment. When installing the app using Workspace One UEM or Workspace ONE Intelligent Hub, the app deploys silently, even on unsupervised devices.

• We've added support for SCEP Certificate Deployment
  From a Chrome User or Device Network (or Credentials) profile, you can now choose a SCEP certificate authority and template when adding a template-based certificate.

• Release Notes: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html

 

 

 

Software Releases Week 49

 

System	Component	Release	Announcement	Release Date
Backend	Console SAAS	21.11	See Release Notes Below. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html	07.12.21
Backend	WS1 Access OnPrem	21.08.0.1	Fix for the Workspace ONE Access virtual appliance deployment issue where you cannot use the Setup wizard because of an expired root user password error Security improvements and other fixes https://docs.vmware.com/en/VMware-Workspace-ONE-Access/21.08/rn/VMware-Workspace-ONE-Access-2108-Release-Notes-On-Premises.html	09.12.21
Backend	WS1 Intelligence	21.12.07	We've updated the integration of Carbon Black with the Trust Network feature. The integration now provides faster delivery of Carbon Black threat and risk information to Workspace ONE Intelligence. It also includes a new field entitled Threat Event Status that you can use in your Intelligence queries. This field identifies when Carbon Black changes and updates its alerts.  To take advantage of these new capabilities, navigate to the Integrations Dashboard and update the API keys for the Carbon Black integration. For more information regarding this enhancement, access the article Workspace ONE Intelligence Integration Update. In the CVE solution, we've added support for iOS. Users can now group data by different time ranges (daily, weekly, 28 days) in widgets. This enhancement enables use cases where the user wants to see data points by larger timeframes such as total bytes received by week or month. https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Intelligence-Release-Notes.html	07.12.21
Backend	Hub Services SaaS	December 2021	Hub App Icon Customization Admins can now customize the Hub app icon color by picking from a list of curated colors to match your company branding. To customize the color of the icon, go to Hub Services console > Branding > Logos> Mobile App Icon and select an option from the color presets. Once the change is saved, users will see the new Hub icon color on the next launch of the Hub app. Note: This will be supported on Hub for iOS version 20.11 and Hub for Android version 21.01 https://docs.vmware.com/en/VMware-Workspace-ONE/services/rn/Workspace-ONE-Hub-Services-Cloud-2021-Release-Notes.html#about	09.12.21
Android	Boxer	21.11	Bug fixes and performance enhancements. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Boxer-for-Android.html	08.12.21
Android	Content	21.12	CICO - This feature allows users to have new, clean session of WS1-Content app as they login, and log-out from a multi-user shared device via WS1- launcher. Custom Acknowledgement button - This feature allows WS1-Content admins to configure the text on Acknowledgement button as per their enterprise requirement. Also, they will have an added capability to customise the time that a user needs to spend on document before they can acknowledge it. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workpace-ONE-Content-for-Android.html	09.12.21
Android	Launcher	21.10	Introducing improved user experiences for check-in check-out flows and single app mode. Cleaned up the check-in check-out login screen and profile loading screens. Introduced a dropdown for selecting recently used Group IDs to speed up the log in process. Introduced new screens and animations for permission granting screens. Starting with 21.10, we now show the permission screens before an end user checks out the device. Redesigned the single app floating home button with new customization. You can now manually specify the duration of showing the clearing app data waiting screen before the next user can log into the device. In Launcher's single app mode, you can now manually configure the number of home button clicks to display the single app floating action button. https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Launcher-for-Android.html	06.12.21
Windows	Drop Ship Provisioning bundle	2.0	This bundle is designed to support to the release of the self-service feature set for DropShipProvisioning Online. The bundle includes: Generic PPKG Generic Unattend WS1 Prov Tool 3.2 msi WS1 Provisioning Tool OSL Batch script to run staging tasks https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/Provisioning_WorkspaceONE/GUID-9CE2ADE1-D73E-4693-812F-4281BEB0EC72.html	06.12.21
Android	SDK	21.11	ASDK-173134 : Android Minimum SDK set to 21 . Bug fixes https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-SDK-for-Android.html	09.12.21

 

 

Apple Configurator now available on iPhone for adding Macs not purchased by an organization into Business Manager

• Apple on Monday released its new Apple Configurator app for iPhone, which is used to deploy iOS and Mac devices in schools and business. With the new iPhone app, it is now possible to set up a Mac not purchased by an organization into Apple Business Manager or Apple School Manager.

• Now Mac computers that were not purchased directly from Apple or an authorized reseller can also be set up into Apple Business Manager and Apple School Manager using just the iPhone, so there is no need to have another Mac nearby to use the macOS version of Apple Configurator.

• More info: https://9to5mac.com/2021/12/06/apple-configurator-now-available-on-iphone-for-adding-macs-not-purchased-by-an-organization-into-business-manager/

• Apple Support: https://support.apple.com/en-ca/guide/apple-configurator/welcome/ios

 

App Transport Security (ATS) in Workspace ONE Intelligent Hub for iOS (87035)

• Workspace ONE Intelligent Hub for iOS has ATS enabled. App Transport Security (ATS) is an iOS feature that forces mobile apps to connect to back-end servers using HTTPS, instead of HTTP, to encrypt data in transit. ATS enforces a minimum security level for communications between a mobile app and web services that support its functionality. Use cases where ATS may influence the experience due to using HTTP (non HTTPS) link/URL:

• Helpful Resources in the Support Tab

• Embedded links/urls from the Home (Custom) Tab

• Web Clip/SaaS Apps in Favorites/Apps/Explore Tabs

• Link objects or Action Buttons with links in notification cards in the For You Tab

• VMware recommendation is to leverage secure/HTTPS links/urls when configuring any of the above locations. VMware has no plans to disable ATS in the Workspace ONE Intelligent Hub for iOS application.

• KB-Reference: https://kb.vmware.com/s/article/87035?lang=en_US

 

FCA-200587: Workspace ONE UEM - Strings "Console" and "Browser" Not Translated on Login History Page (86492)

• In the Workspace ONE UEM Console under the Login History page (Accounts > Administrators > System Activity > Login History) and Login History user modal, strings "Console" and "Browser" in the Login Type and Application columns will not be translated when your admin locale is set to any language other than English. The strings "Console" and "Browser" remain in English regardless of the locale setting.

• Valid for: Workspace ONE UEM 2111

• Due to a change made to update the UI framework of the Login History page in Workspace ONE UEM, two strings found on the page - "Console" and "Browser" are not translated when the admin locale setting is changed from English to another language.

• Viewing the Login History page in Workspace ONE UEM in any locale other than English will result in the strings "Console" and "Browser" to not be translated to the appropriate language.

• Our product team has been engaged and is actively working to resolve the issue.

• KB-Reference: https://kb.vmware.com/s/article/86492?lang=en_US

 

 

VMware Techzone, YouTube and Blog Updates

• Introducing Hub Web Links on Intelligent Hub
  https://blogs.vmware.com/euc/2021/12/introducing-hub-web-links-on-intelligent-hub.html

• Using JWT with Access and UAG to combine internal and external Connection Servers – Ron’s Cool Feature of the Week
  https://blogs.vmware.com/euc/2021/12/jwt-access-uag-combine-internal-external-connection-servers-rons-cool-feature-of-the-week.html

• Windows OS Optimization Tool for VMware Horizon Guide
  https://techzone.vmware.com/resource/windows-os-optimization-tool-vmware-horizon-guide

• Techzone Podcast: Apply to be a vExpert today & Workspace ONE UEM 2111
  https://techzone.vmware.com/apply-be-vexpert-today-workspace-one-uem-2111

• Introduction to ControlUp Scoutbees and Remote DX for VMware Horizon Environments
  https://blogs.vmware.com/euc/2021/12/introduction-to-controlup-scoutbees-and-remotedx-for-vmware-horizon-environments.html

• Workspace ONE Launcher keeps getting better
  https://blogs.vmware.com/euc/2021/12/workspace-one-launcher-keeps-getting-better.html

 

Blog, 3rd Party and Partner Updates

• Apple Configurator now available on iPhone for adding Macs not purchased by an organization into Business Manager
  https://9to5mac.com/2021/12/06/apple-configurator-now-available-on-iphone-for-adding-macs-not-purchased-by-an-organization-into-business-manager/

• IGEL Releases Support for VMware Workspace ONE Intelligent Hub for Linux
  https://www.prnewswire.com/news-releases/igel-releases-support-for-vmware-workspace-one-intelligent-hub-for-linux-301439053.html?tc=eml_cleartime

• Mobile-Jon: Taking a Look at Apple Business Essentials for Small and Medium Business
  https://mobile-jon.com/2021/12/06/taking-a-look-at-apple-business-essentials-for-small-and-medium-business/

• Sam Akroyd: Using Workspace One Sensors with Freestyle Orchestrator
  https://www.samakroyd.com/2021/12/03/using-workspace-one-sensors-with-freestyle-orchestrator/

• Mobinergy Blog: Lookout - Phishing and Content Protection Automatic Activation
  https://blog.mobinergy.com/pcp-auto-activation/

 

Software Updates December 2021

 

System	Component	Release	Announcement	Release Date
Backend	Console SAAS	21.11	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2111/rn/vmware-workspace-one-uem-2111-release-notes/index.html	07.12.21
Backend	Assist	21.09	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Workspace-ONE-Assist.html	02.12.21
iOS	Workspace ONE SDK SWIFT	21.11	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-SDK-for-iOS--Swift-.html	03.12.21
Android	Boxer	21.11	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workspace-ONE-Boxer-for-Android.html	08.12.21
Android	Content	21.12	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/VMware-Workpace-ONE-Content-for-Android.html	09.12.21
Android	Launcher	21.10	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/rn/Introducing-VMware-Workspace-ONE-Launcher-for-Android.html	06.12.21
Windows	Drop Ship Provisioning bundle	2.0	https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/services/Provisioning_WorkspaceONE/GUID-9CE2ADE1-D73E-4693-812F-4281BEB0EC72.html	06.12.21

 

Patch & Seed Script Updates Week 49

• OS Seed Script Update

• Most recent updates: IOS 15.1.1 macOS 11.6.1

• https://resources.workspaceone.com/view/rywydmj6ghb9nmch4ywq/en

• Last Update: CW47

• Custom Script to Allow Android 12 enrollments into Workspace ONE UEM Console

• Agnostic script to update seed data to allow Android 12 enrollments into the Console.

• https://resources.workspaceone.com/view/rvfdv9s6mhsh4xgdxf7f/en

• Last Update: CW44

 

• Workspace ONE UEM 20.05

• Patch Level: 20.5.0.52
  AAPP-12517 - Generate unique PayloadIdentifier in configuration profile on push
  Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2005/rn/VMware-Workspace-ONE-UEM-Release-Notes-2005.html#-20-5-0-52--patch-resolved-issues-resolved

• Last Update: CW35

 

• Workspace ONE UEM 20.08

• Patch Level: 20.8.0.35
  AAPP-12517 - Generate unique PayloadIdentifier in configuration profile on push
  Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2008/rn/VMware-Workspace-ONE-UEM-Release-Notes-2008.html#-20-8-0-34-patch-resolved-issues-resolved

• Last Update: CW36

• Workspace ONE UEM 20.11

• Patch Level: 20.11.0.39

• UM-334: OG Level consolidation of enrollment users.

• AGGL-10905: Unable to assign Microsoft Launcher application to Android devices.

• Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2011/rn/VMware-Workspace-ONE-UEM-Release-Notes-2011.html#-20-11-0-39-patch-resolved-issues-resolved

• Last Update: CW45

• Workspace ONE UEM 21.02

• Patch Level: 21.2.0.26
  RUGG-10356: Zebra Devices - Proxy settings configured as part of staging Wi-Fi profile (Workspace ONE UEM) is not being applied, hence enrollment stalls.
  Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2102/rn/Workspace-ONE-UEM-2102-Release-Notes.html#-21-2-0-26-patch-resolved-issues-resolved

• Last Update: CW46

• Workspace ONE UEM 21.05

• Patch Level: 21.5.0.33

• AMST-34687: BSP import Retry not working.

• UM-7221: Cannot modify an Admin Role on Child Organization Group.

• AMST-34666: Removal command targets incorrectly when the app is deleted from UEM.

• Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2105/rn/Workspace-ONE-UEM-2105-Release-Notes.html#21-5-0-33-patch-resolved-issues-resolved

• Last Update: CW49

 

• Workspace ONE UEM 21.09

• Patch Level: 21.9.0.6

• AMST-34558: DS cluster under stress due to ApproveUpdate windows commands.

• Docs-Reference: https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2109/rn/Workspace-ONE-UEM-2109-Release-Note.html#-21-9-0-6-patch-resolved-issues-resolved

• Last Update: CW45